General

  • Target

    f0ad4598add8aedee80ad36b547e44613d1690cc818564d82c18bdeccaeeb90c

  • Size

    234KB

  • MD5

    87d241498d5647b80b3ae5f7b9b00e0a

  • SHA1

    b34fead8f3f8afe7fb6e9ff3443ec06f3000ed9f

  • SHA256

    f0ad4598add8aedee80ad36b547e44613d1690cc818564d82c18bdeccaeeb90c

  • SHA512

    7b32ec21dfd1fbe6da1de579033c60c70d707ff73ceb6fb1b1880e059c15d3f8247b0ec30797e0f4fa96690bca11ae6be8a33ca2297f55e4f42b04013b781250

  • SSDEEP

    3072:oRICC2y8xNaoQAOeDxKBgxtfYawLMv05nCyN0xiRG:oRICbooQAOeDxKBgLYHYv1yWw

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7103128534:AAEX7cqstzGDmw81dLz-shfxzvXALbiavNI/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0ad4598add8aedee80ad36b547e44613d1690cc818564d82c18bdeccaeeb90c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections